Huntress finds three GootLoader infections since Oct 27, 2025; two led to domain controller compromise within 17 hours.
The Gootloader malware loader operation has returned after a 7-month absence and is once again performing SEO poisoning to ...